Logstash - add new field under array of json objects

Elastic Stack Logstash
1

I have a JSON input as given below

{ 
"id":4,
"locale":"en",
"restaurants": [ 
    { "addressLine" : "123 Road Dr", "city" : "City ST", "phone" : "555-555-5555", "distance" : "0" } , 
    { "addressLine" : "456 Fake St", "city" : "City ST", "phone" : "555-123-1212", "distance" : "0" } 
] }

Here I want to concatenate "addressLine" and "City"to new field called "fulladdress" under each object in "restaurant" array

I tried mutate,ruby filters but looks like I am missing something.

In case of a simple json,mutate add_field works perfectly

Please help

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.